Claims 

[cl ] A method to accomplish the collaborative suppression of undesirable activity on 

any node within a computing environment through (1 ) the detection of a 
compromise event; (2) subsequent publication of a compromise event 
notification and (3) resulting service provider node responding to any 
subsequent service request from a compromised node (identified in the 
aforementioned compromise event notification) with one, or more, suppressive 
responses. 

[c2] The method of claim 1 , wherein the method by which the identification of the 

potential for undesirable activity is accomplished by the detection of the 
occurrence of a compromise event and the subsequent publication of a 
compromise event notification. 

[c3] The method of claim 2, wherein the specific nature of a compromise event is 

unrestricted and left to the specific implementation of a compromise detector. 

[c4] The method of claim 2, wherein the detection of a compromise event and 

publication of an associated compromise event notification are distributed 
capabilities, simultaneously implementable on any (or even all) nodes of a 
computing environment. 

[c5] The method of claim 1 , wherein the collaborative suppression of undesirable 

activity is affected by the response, of service providing nodes, to service 
requests received from a node identified in a compromise event notification. 
This is referred to as the suppressive response. 

[<=6] The method of claim 5, wherein the specific nature and count of suppressive 

responses of any particular node is unrestricted and left to the specific 
implementation of the service providing node. 

[c7] The method of claim 6, wherein the association of one or more suppressive 

responses, of a particular service providing node, to one or more compromise 
event notifications is unrestricted and left to the specific run-time configuration 
of the service providing node. 
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fc8] The method of claim 5, wherein the collaborative suppression of undesirable 

activity is affected by the distributed execution of one or more suppressive 
responses by one or more service providing nodes. 

[c9] The method of claim 1 , wherein there is no restriction on the location, or co- 

location, of compromise detection and/or service provisioning to specific nodes, 
or on the same node; allowing for remote compromise detection and/or a single 
node performing compromise detection and service provisioning. 




APP-ID=10064178 



PAGE 13 of 17 



